asc-check-readiness

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s purpose aligns with its actions, but it delegates an Apple submission workflow to a third-party CLI and includes an `eval` pattern that executes CLI-returned command text. Data flow is coherent and not overtly exfiltrative, yet the credential-forwarding and eval-based automation make it higher risk than a benign documentation-only skill.

Confidence: 90%Severity: 56%
Audit Metadata
Analyzed At
Sep 23, 2026, 11:19 AM
Package URL
pkg:socket/skills-sh/tddworks%2Fasc-cli-skills%2Fasc-check-readiness%2F@cd1a0844f6418d987c13ab66ee1108665c5ac51a39bdc1e905baa1afeb90f244